In this privacy statement, Aesthetic Center Jan van Goyen would like to explain how we handle medical data from patients, how we guarantee the confidentiality of this data and what rights you have as a patient with regard to this data.
EC JvG processes data from patients who turn to us for care. As soon as you enter EC JvG, we will note your name, address and telephone number. We are also legally obliged to note your citizen service number (BSN) and to check your identity on the basis of your proof of identity.
If you are under treatment at EC JvG, we are also legally obliged to keep a medical file of you in which we record the relevant data in connection with your treatment.
All healthcare providers working in EC JvG have a duty of confidentiality. This means that, in principle, no information about you may be provided to others without your permission. There are a few (legal) exceptions to this (click here).
All other employees (support services in the hospital) also have a duty of confidentiality, which is laid down in the employment contract or other agreement entered into with the hospital.
EC JvG has a comprehensive security policy regarding patient data.
You can find more details about the security policy here.
In EC JvG, only healthcare providers who are directly involved in your treatment are allowed to view your medical data. Other employees in support functions can only view the data that is necessary in connection with their position. Some employees can therefore only view your address details and, for example, schedule appointments for you or send declarations, but are not authorized to view your medical data. Other employees, for example working in the healthcare administration, can view medical data if this is necessary for sending or checking invoices.
In connection with patient safety, a care provider with whom you do not yet have a treatment relationship can still view your file in an acute situation. Before he can view your file, the healthcare provider must indicate in the digital file why he wants access to your file. This is important if, for example, you are admitted acutely and cannot be contacted. EC JvG can in all cases check afterwards who has viewed your file (for more details, see the logging policy).
EC JvG can only provide data to third parties with your permission. This permission is assumed for the provision of data about your treatment to your general practitioner, so no permission is requested for this.
However, we always ask for your permission before providing medical data to another healthcare institution (or other third parties). EC JvG offers the possibility to digitally exchange medical data with a number of healthcare institutions via a secure system. After you have given permission for this, this means that if you are admitted to AMC or VUmc, for example, the care providers there can also consult your EC JvG medical data.
You can register your permission to exchange data with these healthcare institutions once via a consent form. In the future EC JvG will expand the number of healthcare institutions with which data can be securely exchanged digitally.
For medication data, EC JvG can retrieve data from the Landelijk SchakelPunt (LSP). You must first give permission to your pharmacy for this before EC JvG can consult this information. Click here For more information.
There are some exceptions to the principle that your consent is required for the provision of data. If there is a legal obligation to provide data, such as to your health insurer, your permission is not required. Find out more about these exceptions here.
The retention period of medical data is at least 15 years. There are a few exceptions to this: if there is a legal obligation to keep data for longer, or if it is necessary for proper care (for example in the case of chronic diseases) or if it concerns data that is important to third parties (for example hereditary disorders).
EC JvG often conducts research into the quality of care. The law also obliges us to conduct such investigations. If an external agency is engaged in such an investigation to process data, we always conclude an agreement with the external agency to guarantee the security and confidentiality of the patient data.
When it comes to medical scientific research to certain treatments, your permission is in principle required. For the rules regarding medical scientific research, we would like to refer to the information about this, which you here [folder is in draft] can find.
A. Right of access
You have the right to inspect your medical file. You can ask your practitioner to inspect the data stored in the electronic patient file.
If you are being treated in several specialisms, you should ask the practitioner of the department whose data you want to view.
B. Right to Copy
You can ask for a copy of your medical file. You can indicate from which specialism and over which period you would like to receive a copy. We will send you the data on a secure USB stick. The password to open this stick will be sent to you separately by email. You can get a copy of your file here request.
There is no charge for providing a first copy. If you ask again for a copy of data that has already been provided to you, we can charge a fee for this.
C. Right to correction and supplement
You have the right to have your medical file corrected. This right to correction only applies to factual inaccuracies (for example your name or date of birth). For the rest, you can add to the information in your file. Your statement can be added to the data stored.
You can ask your practitioner for a correction or addition to your file.
D. Right to Destruction
You can request the destruction of your medical file, or of part of your medical file. There are exceptions to the right to destroy your file: if it concerns data for which there is a legal obligation to keep it, or if it concerns data that is of interest to third parties, the hospital cannot grant this request. EC JvG must comply with a request to destroy data within 3 months.
Who gives permission for the provision of data to/exchange of data with third parties referred to under 5 and who exercises the rights with regard to the medical file referred to under 8?
If you have complaints about the way in which your medical data is handled, you can contact your healthcare provider or the complaints officer of EC JvG (complaints@jvg.nl).
If you believe that your medical file has been accessed unlawfully, you can also submit a (motivated) complaint about this to the complaints officer. The complaints officer can then request the inspection of EC JvG's medical file to investigate this.
If you believe that the data processing within EC JvG is not in accordance with legislation and regulations, you can also report this to the complaints officer of EC JvG (complaints@jvg.nl).
The Dutch Data Protection Authority is the independent supervisor with regard to compliance with privacy legislation. You will find a lot of information on the website of the Dutch Data Protection Authority, including about privacy regulations and data processing in healthcare. See www.Authority Data.nl.
For further information about the General Data Protection Regulation, we also refer you to:
www.rijksoverheid.nl/ministeries/ministerie-van-volksgezondheid-welzijn-en-sport/avg